Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/49EE2C97D87CAD103753E28E1CE5483190375B87.cer
File:                     49EE2C97D87CAD103753E28E1CE5483190375B87.cer (raw, json)
Hash identifier:          pB4Er1/8rrpTv9hEmOfp5fIYh6JSr9UShr2b0nMVlx4=
Subject key identifier:   49:EE:2C:97:D8:7C:AD:10:37:53:E2:8E:1C:E5:48:31:90:37:5B:87
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       386319A949B13590AFA0B6D1325F5A952564A4DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/49EE2C97D87CAD103753E28E1CE5483190375B87.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Sep 2023 14:07:57 +0000
Certificate not after:    Mon 23 Sep 2024 14:12:57 +0000
Subordinate resources:    AS: 266481
                          IP: 170.83.88.0/22
                          IP: 2804:387c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:63:19:a9:49:b1:35:90:af:a0:b6:d1:32:5f:5a:95:25:64:a4:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 25 14:07:57 2023 GMT
            Not After : Sep 23 14:12:57 2024 GMT
        Subject: CN=49EE2C97D87CAD103753E28E1CE5483190375B87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:47:e6:28:3e:36:e0:d9:c3:60:96:6c:c7:12:
                    d0:6b:b3:5f:63:bc:b8:a8:9c:9b:8c:17:26:e9:d9:
                    19:bc:a7:63:24:37:5c:7d:7b:15:e7:37:cb:db:8d:
                    a6:a5:5c:6b:ca:b0:8b:73:3d:a0:f7:ac:15:a5:bd:
                    1a:a8:40:da:54:61:e5:40:68:e5:e5:c6:cc:e9:a8:
                    a3:43:84:7e:67:4c:44:72:19:c0:1c:ea:f4:81:7d:
                    b7:cd:b8:4b:18:65:e6:ac:50:ff:09:76:a2:67:e3:
                    8d:fc:02:c2:f0:80:75:ca:d5:cc:0a:ea:29:02:90:
                    2b:8b:43:dc:c4:25:70:cf:3c:d5:5c:f0:a6:16:75:
                    48:07:09:d4:86:4c:63:27:17:fa:97:13:8f:ee:a6:
                    49:5c:f6:e0:c7:f4:bc:20:4f:33:df:dd:40:92:5c:
                    bc:42:45:a5:77:bc:3f:84:b9:07:bc:6b:c8:a8:fe:
                    72:5e:b5:f0:68:b2:83:ce:82:28:9e:a5:62:c5:6b:
                    de:4b:24:15:88:ff:09:61:22:85:e8:1f:d4:03:db:
                    d6:be:13:d9:5e:af:29:90:60:a7:60:53:f9:bd:66:
                    f7:51:79:50:eb:97:1f:91:4a:1f:d8:6e:a4:c4:91:
                    cc:49:c9:4b:d9:bb:4a:96:85:6b:6e:a9:8d:5e:44:
                    12:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:EE:2C:97:D8:7C:AD:10:37:53:E2:8E:1C:E5:48:31:90:37:5B:87
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/49EE2C97D87CAD103753E28E1CE5483190375B87.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.88.0/22
                IPv6:
                  2804:387c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266481

    Signature Algorithm: sha256WithRSAEncryption
         0a:ce:88:de:aa:d5:61:c8:21:d9:39:93:9f:df:cb:d0:37:69:
         8a:c6:0f:a1:08:3e:ed:24:b6:8b:be:81:b0:10:0f:14:15:9e:
         1d:6d:a9:02:46:86:7a:12:0b:ea:75:a4:77:f5:ef:3b:09:8c:
         32:19:eb:8c:f1:6c:8d:b1:ae:5e:b7:6a:d9:bf:cb:5e:de:25:
         ad:83:9b:bb:39:9e:83:3e:d8:09:71:ba:cf:6f:92:3f:d3:69:
         9b:a2:97:0e:cd:dc:81:5a:2c:45:f5:75:32:b5:48:fd:35:3f:
         5d:35:1a:be:9a:c4:46:b4:77:ec:bc:6f:c6:de:a2:19:29:d1:
         e2:1d:36:de:5d:c9:bc:05:72:da:83:c1:07:e4:26:19:98:d3:
         c2:c7:b6:9d:28:fc:e0:8d:1c:d7:0c:d0:c8:73:10:96:12:b6:
         ca:0c:26:e9:e7:3a:46:fb:24:81:f6:d9:f0:48:ca:6e:e1:42:
         bb:f9:0f:17:dc:93:06:c2:e4:b1:32:5b:f3:a6:6c:3f:40:25:
         3c:d0:1d:1a:9e:6f:f4:1a:c6:f1:b5:4d:8c:19:e7:8f:df:ea:
         09:25:9e:3d:6c:a7:04:87:6a:ed:6d:d1:66:0c:cf:1c:e9:2f:
         e8:ab:ba:aa:c2:39:de:7f:6c:6c:3d:dd:63:2c:2f:3d:6a:3d:
         0a:25:a3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org